Disabling Print Screen

SYZH
SYZH used Ask the Experts™
on
Hi,
 I need a step by step document to disable Print screen from my clients Using Windows 7 machines with Symantec or through Group policy.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
According to Microsoft, you can setup a group policy to do this as follows:

1.  Start notepad via WinKey+R, then type "Notepad".  
2.  Paste the following into it, then save it as "DisablePrintScreen.reg":

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout]
"Scancode Map"=hex:00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,\
00,00,54,00,00,00,00,00

3.  Reboot the computer.

4.  To re-activate the Print Screen, create another .reg file containing the following:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout]
"Scancode Map"=-

Run it and reboot the computer.
System Administrator
Commented:
Registry file can do it but I would recommend applying the same registry key via Group Policy Preferences that way you get much better control on how the registry key is targeted and you can remotely run reports on the computer for troubleshooting.


Open Group Policy Management

Browse Through below tree as you want the policy to get applied:

Computer Configuration or User Configuration
   └ Preferences
      └ Windows Settings
         └ Registry

Right Click -> New -> Registry Item
Now Fill as I have written the setting here :

Action : Create
Hive : HKEY_LOCAL_MACHINE
Key Path : SYSTEM\CurrentControlSet\Control\Keyboard Layout  (Browse next to the box and select the folder from the tree)
Value Name : Scancode Map
Value Type : REG_BINARY
Value Data :  hex:00,00,00,00,00,00,00,00,04,00,00,00,2a,e0,37,e0,00,00,37,e0,
00,00,54,00,00,00,00,00


Reboot the computer once it gets applied for the first time.

Hope this helps !

Author

Commented:
Hi,
This document  is ok, but I need a document for disabling Print Screen with Symantec and applying this on the client machines.
Naveen JoshiSystem Administrator

Commented:
As earlier you told "or Group Policy" so the steps were forwarded to you for implementing it through group policy.

anyways if you want to do it from Symantec Endpoint Protection, You can do it by remapping the scan code(Using registry) and creating a policy in the SEP to modify the changes to that registry key will block use of print screen.

Here are the steps :

First change the registry key...
REF:
http://www.pcreview.co.uk/forums/thread-1532351.php 

Then create a application and device control policy to block modification to that registry key(you can set the action to take in action tab)......
SEP
And Yes , Client Machines may require a reboot after the above policy is applied for the first time.

Hope this will help you...

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial